Old inference gateway/Vertex auth settings now get structured deprecation guidance.
A new deprecation-tracking system, BATCH_2026_09, adds structured migration metadata (including an explicit effect string describing exactly what breaks) to several legacy config values. inferenceGatewayAuthScheme: "sso" is deprecated since it is no longer inferred as browser sign-in (use inferenceCredentialKind: "interactive" instead), inferenceGatewayAuthScheme: "auto" now just rewrites to "bearer", and inferenceCredentialKind: "interactive" combined with inferenceVertexWorkforceAudience is flagged as ambiguous in favor of "workforce".
As part of the same change, Vertex AI's credential kind literal "oauth" is renamed to "interactive": the discriminated-union kind and the deriveInferenceCredentialKind logic for the Vertex OAuth client ID now both return "interactive" instead of "oauth".
The legacyFlatKey aliases isDxtEnabled and isDxtDirectoryEnabled also gain BATCH_2026_09 deprecation metadata (warnFrom 2026-09-10, supportEnds 2026-10-07): after support ends, the old names will be reported as unreadable, causing desktop extensions to read as disabled (isDxtEnabled) or the directory-only restriction to silently stop applying (isDxtDirectoryEnabled).
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
From Claude Desktop 2.7032.0, `inferenceCredentialKind: "external-idp"` with [`inferenceIdpOidc`](/docs/third-party/claude-desktop/configuration#inferenceidpoidc) and `inferenceIdpAuthFlow`, the keys [Amazon Bedrock identity provider sign-…third-party/claude-desktop/gateway see the edit
| <span id="inferencegatewayauthscheme" />Gateway auth scheme<br />`inferenceGatewayAuthScheme` | `enum` | MDM + Bootstrap<br />Added in 1.3036.0 | `bearer` | How the gateway credential is sent on the wire (Authorization: Bearer vs x-api-k…third-party/claude-desktop/configuration see the edit
| <span id="inferencecredentialkind" />Credential kind<br />`inferenceCredentialKind` | `enum` | MDM + Bootstrap<br />Added in 1.8555.0 | — | Selects the credential source. When set, only that source is used (no fallback). One of: `static`…third-party/claude-desktop/configuration see the edit
Anthropic's documentation has since written up inferenceCredentialKind, on Configuration reference.